Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to properly validate CSRF tokens in the /api/v4/access_control_polic…Check if you run itEPSS 0.22%Mar 25, 2026
- Medium6.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to rate limit login requests which allows unauthenticated remote att…Check if you run itEPSS 0.52%Mar 25, 2026
- Medium5.5Requests is a HTTP library.Check if you run itEPSS 0.18%Mar 25, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This…Check if you run itEPSS 0.16%Mar 25, 2026
- Medium5.0Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1.Check if you run itEPSS 0.27%Mar 25, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Drupal Theme Negotiation by Rules allows Cross Site Request Forgery.This issue affects Theme Negotiation by Rules: f…Check if you run itEPSS 0.14%Mar 25, 2026
- High7.7A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affecte…Check if you run itEPSS 0.28%Mar 25, 2026
- Medium5.4A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and…Check if you run itEPSS 0.28%Mar 25, 2026
- High8.6A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VL…Check if you run itEPSS 0.35%Mar 25, 2026
- Medium6.5A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a d…Check if you run itEPSS 0.09%Mar 25, 2026
- High8.8OpenCart Core 4.0.2.3 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'se…Check if you run itEPSS 0.34%Mar 25, 2026
- Critical9.8In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.Check if you run itEPSS 0.53%Mar 25, 2026
- Medium5.4A use-after-return vulnerability exists in the server when handling DNS queries signed with SIG(0).Check if you run itEPSS 0.32%Mar 25, 2026
- Medium6.5Under certain conditions, may crash when processing a correctly signed query containing a TKEY record.Check if you run itEPSS 0.60%Mar 25, 2026
- Medium5.1Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can lead to unauthorized modific…Check if you run itEPSS 0.10%Mar 25, 2026
- High8.8A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated attackers within network ran…Check if you run itEPSS 0.41%Mar 25, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Currently the code attempts to accept…Check if you run itEPSS 0.27%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing struct bpf_plt contains…Check if you run itEPSS 0.13%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz The only user of frag_size fiel…Check if you run itEPSS 0.10%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called during a c…Check if you run itEPSS 0.12%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Even though we check that we "should" be able…Check if you run itEPSS 0.13%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabled When FEAT_LPA2 is enabled…Check if you run itEPSS 0.12%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xdp: produce a warning when calculated tailroom is negative Many ethernet drivers report xdp Rx que…Check if you run itEPSS 0.14%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drbd: fix null-pointer dereference on local read error In drbd_request_endio(), READ_COMPLETED_WITH…Check if you run itEPSS 0.12%Mar 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an…Check if you run itEPSS 0.85%Mar 25, 2026